IT Help Central - Division of Information Technology
Texas Tech University

HELP!!!

IT Help Central

[ Hours of Operation ]
[ Safe Computing ]
[ Customer Survey ]
[ Security Bulletins ]
[ Instructions ]
[ Request Assistance ]
[ Our Team ]
[ Employment ]
[ Strategic Plan ]
[ Site Map ]

Related Sites

[ Texas Tech ]
[ IT Division ]
[ High Tech ]
[ Raiderlink ]
[ Computer Labs ]
[ Training ]
[ TTUHSC Help Desk ]
[ Network Access ]

General Info

[ New Students ]
[ Text-Only Version ]
[ Buying the Right Computer ]

ASC
Room 101
2903 4th Street

W32.Sober.X@mm is a mass-mailing worm that uses its own SMTP engine to spread and lowers security settings. It sends itself as an email attachment to addresses gathered from the compromised computer. The email may be in either English or German.

Systems Affected:  Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

Systems Not Affected:  DOS, Linux, Macintosh, OS/2, UNIX

It is recommended that you view the full article related to this vulnerability at Symantec.com

Quick Fix Instructions

1. Download the FixSbr.exe file from IT Help Central.
2. Save the file to a convenient location, such as your downloads folder or the Windows desktop (or removable media known to be uninfected).
3. To check the authenticity of the digital signature, refer to the "Digital signature" section later in this write-up.
4. If you are running Windows Me or XP, then disable System Restore. Refer to the "System Restore option in Windows Me/XP" section later in this write-up for further details.
   
   Caution: If you are running Windows Me/XP, we strongly recommend that you do not skip this step.
    
5. Double-click the FixSbr.exe file to start the removal tool.
6. Click Start to begin the process, and then allow the tool to run.
7. Restart the computer.
8. Run the removal tool again to ensure that the system is clean.
9. If you are running Windows Me/XP, then re-enable System Restore.
10. Run Live Update to make sure that you are using the most current virus definitions.

For specific details on each of these steps, please follow this link.